przez kepa416 01 Lut 2009, 15:11
Witam prosiłbym o sprawdzenie logu z powodu banowania kont przez programy anty cheatowe w grach. do tego ostatnio bardzo często Firefox robi mi błędy co jest bardzo uciążliwe.
- Kod: Zaznacz wszystko
ComboFix 09-01-31.02 - kepa416 2009-02-01 13:57:09.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1250.1.1045.18.2047.1561 [GMT 1:00]
Uruchomiony z: c:\documents and settings\kepa416\Pulpit\ComboFix.exe
AV: avast! antivirus 4.8.1296 [VPS 090131-0] *On-access scanning disabled* (Updated)
UWAGA - TEN KOMPUTER NIE MA ZAINSTALOWANEJ KONSOLI ODZYSKIWANIA !!
.
((((((((((((((((((((((((((((((((((((((( Usunięto )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\documents and settings\kepa416\Dane aplikacji\EurekaLog
c:\windows\system32\hpowiax2.dll
c:\windows\system32\setup.ini
.
((((((((((((((((((((((((( Pliki utworzone od 2009-01-01 do 2009-02-01 )))))))))))))))))))))))))))))))
.
2009-02-01 12:45 . 2009-02-01 12:45 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\InstallShield
2009-02-01 12:36 . 2009-02-01 12:36 <DIR> d-------- C:\Netgame
2009-02-01 11:50 . 2009-02-01 11:50 <DIR> d-------- c:\program files\COMODO
2009-02-01 11:50 . 2009-02-01 12:33 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\comodo
2009-02-01 11:50 . 2009-02-01 12:37 147,192 --a------ c:\windows\system32\guard32.dll
2009-02-01 11:50 . 2009-02-01 12:37 101,776 --a------ c:\windows\system32\drivers\cmdguard.sys
2009-02-01 11:50 . 2009-02-01 12:37 31,504 --a------ c:\windows\system32\drivers\cmdhlp.sys
2009-01-31 17:48 . 2009-01-31 17:48 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\ATI
2009-01-31 17:45 . 2009-01-31 17:45 <DIR> d-------- C:\ATI
2009-01-31 17:45 . 2009-01-13 21:05 593,920 --------- c:\windows\system32\ati2sgag.exe
2009-01-31 12:28 . 2009-01-31 12:29 0 --a------ C:\Public.ini
2009-01-29 00:17 . 2009-01-29 00:17 421,888 --a------ c:\windows\NEXON_EU_DownloaderUpdater.exe
2009-01-28 01:36 . 2009-01-28 02:20 <DIR> d-------- c:\documents and settings\kepa416\DoctorWeb
2009-01-28 00:20 . 2009-01-28 00:20 <DIR> d-------- c:\program files\Real Alternative
2009-01-27 22:52 . 2009-01-27 22:52 <DIR> d-------- c:\program files\Common Files\INCA Shared
2009-01-27 22:52 . 2003-07-21 04:17 5,174 --a------ c:\windows\system32\nppt9x.vxd
2009-01-27 22:52 . 2005-01-04 19:43 4,682 --a------ c:\windows\system32\npptNT2.sys
2009-01-27 22:08 . 2009-01-27 22:08 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\Grisoft
2009-01-27 21:26 . 2009-01-30 19:57 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\TrackMania
2009-01-27 00:05 . 2009-01-27 00:05 <DIR> d-------- c:\program files\K-Lite Codec Pack
2009-01-27 00:05 . 2008-09-16 20:23 168,448 --a------ c:\windows\system32\unrar.dll
2009-01-25 00:43 . 2009-01-25 00:43 <DIR> d-------- c:\documents and settings\kepa416\Dane aplikacji\Disney Interactive Studios
2009-01-25 00:35 . 2009-01-25 00:41 956 --a------ c:\windows\disney.ini
2009-01-24 16:17 . 2008-04-14 21:51 82,432 ---h---t- c:\windows\system32\86b0fae.dll
2009-01-24 16:17 . 2008-04-14 21:51 82,432 ---h---t- c:\windows\system32\28b9f3a0.dll
2009-01-21 16:56 . 2009-01-21 17:34 <DIR> d-------- c:\documents and settings\kepa416\Dane aplikacji\BESTplayer
2009-01-21 10:41 . 2009-01-21 11:57 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\Spybot - Search & Destroy
2009-01-20 20:19 . 2009-02-01 13:59 63,850 --a------ c:\windows\system32\oodbs.lor
2009-01-20 18:16 . 2009-01-25 17:17 <DIR> d-------- c:\windows\system32\oodag
2009-01-20 18:12 . 2009-01-20 18:12 <DIR> d-------- c:\program files\OO Software
2009-01-20 15:14 . 2009-01-20 17:00 <DIR> d-------- c:\documents and settings\kepa416\Dane aplikacji\Mumble
2009-01-20 00:05 . 2009-01-20 00:05 122,142 --a------ c:\windows\hpoins08.dat
2009-01-20 00:05 . 2006-01-24 11:17 4,445 --------- c:\windows\hpomdl08.dat
2009-01-17 09:12 . 2009-01-19 10:59 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\Electronic Arts
2009-01-17 03:57 . 2009-01-17 03:59 <DIR> d-------- c:\documents and settings\kepa416\Dane aplikacji\IconTweaker
2009-01-17 03:57 . 2009-01-17 03:59 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\IconTweaker
2009-01-17 03:29 . 2008-04-14 21:50 219,648 --a------ c:\windows\system32\uxtheme.uxtender
2009-01-17 03:23 . 2008-04-14 22:51 116,736 --a--c--- c:\windows\system32\dllcache\xrxwiadr.dll
2009-01-17 03:23 . 2001-08-18 06:37 99,865 --a--c--- c:\windows\system32\dllcache\xlog.exe
2009-01-17 03:23 . 2001-10-26 17:30 27,648 --a--c--- c:\windows\system32\dllcache\xrxftplt.exe
2009-01-17 03:23 . 2001-10-26 17:29 23,040 --a--c--- c:\windows\system32\dllcache\xrxwbtmp.dll
2009-01-17 03:23 . 2008-04-13 22:04 19,455 --a--c--- c:\windows\system32\dllcache\wvchntxx.sys
2009-01-17 03:23 . 2008-04-14 22:51 18,944 --a--c--- c:\windows\system32\dllcache\xrxscnui.dll
2009-01-17 03:23 . 2001-08-17 20:11 16,970 --a--c--- c:\windows\system32\dllcache\xem336n5.sys
2009-01-17 03:23 . 2008-04-13 22:04 12,063 --a--c--- c:\windows\system32\dllcache\wsiintxx.sys
2009-01-17 03:23 . 2008-04-14 22:51 8,192 --a--c--- c:\windows\system32\dllcache\wshirda.dll
2009-01-17 03:23 . 2001-10-26 17:30 4,608 --a--c--- c:\windows\system32\dllcache\xrxflnch.exe
2009-01-17 03:21 . 2008-04-14 22:50 4,274,816 --a--c--- c:\windows\system32\dllcache\nv4_disp.dll
2009-01-17 03:20 . 2008-04-14 22:50 1,737,856 --a--c--- c:\windows\system32\dllcache\mtxparhd.dll
2009-01-17 03:19 . 2001-10-26 17:29 1,733,120 --a--c--- c:\windows\system32\dllcache\g400d.dll
2009-01-17 03:18 . 2001-10-26 16:57 980,034 --a--c--- c:\windows\system32\dllcache\cicap.sys
2009-01-17 03:17 . 2001-08-17 21:28 762,780 --a--c--- c:\windows\system32\dllcache\3cwmcru.sys
2009-01-17 02:46 . 2009-01-17 02:46 <DIR> d-------- c:\documents and settings\kepa416\Dane aplikacji\ViStart
2009-01-17 02:44 . 2009-01-17 02:44 <DIR> d-------- c:\documents and settings\kepa416\Dane aplikacji\Styler
2009-01-17 02:39 . 2006-12-03 17:15 111,104 --a------ c:\windows\system32\Uharc.exe
2009-01-17 02:39 . 2009-01-17 02:39 78,942 --a------ c:\windows\Icon_1.ico
2009-01-17 02:39 . 2006-12-03 17:15 69,632 --a------ c:\windows\system32\moveex.exe
2009-01-17 02:39 . 2006-12-03 17:15 19,968 --a------ c:\windows\system32\reico.exe
2009-01-17 02:39 . 2006-12-03 17:14 8,636 --a------ c:\windows\system32\modifype.exe
2009-01-17 02:38 . 2008-11-11 23:22 20,480 --a------ c:\windows\system32\scrnrdr.exe
2009-01-16 17:46 . 2009-01-16 17:46 <DIR> d-------- c:\program files\ZTE ZXDSL 852
2009-01-16 17:46 . 2006-09-25 07:26 425,984 -ra------ c:\windows\system32\stmcfg32.dll
2009-01-16 17:46 . 2006-09-25 07:28 151,552 -ra------ c:\windows\system32\stmctrl.dll
2009-01-16 17:46 . 2009-01-16 17:47 3,259 --a------ c:\windows\stsetup.htm
2009-01-15 22:04 . 2009-01-15 22:04 <DIR> d-------- c:\program files\p-nand-q.com
2009-01-15 09:37 . 2009-01-15 09:37 42,320 --a------ c:\windows\system32\xfcodec.dll
2009-01-14 08:14 . 2009-01-14 08:14 3,455,488 --a------ c:\windows\system32\drivers\ati2mtag.sys
2009-01-14 08:14 . 2009-01-14 08:14 3,455,488 --a--c--- c:\windows\system32\dllcache\ati2mtag.sys
2009-01-14 06:46 . 2009-01-14 06:46 11,591,680 --a------ c:\windows\system32\atioglxx.dll
2009-01-14 05:53 . 2009-01-14 05:53 286,720 --a------ c:\windows\system32\atiok3x2.dll
2009-01-14 05:49 . 2009-01-14 05:49 425,984 --a------ c:\windows\system32\ATIDEMGX.dll
2009-01-14 05:47 . 2009-01-14 05:47 323,584 --a--c--- c:\windows\system32\dllcache\ati2dvag.dll
2009-01-14 05:47 . 2009-01-14 05:47 323,584 --a------ c:\windows\system32\ati2dvag.dll
2009-01-14 05:36 . 2009-01-14 05:36 196,608 --a------ c:\windows\system32\atipdlxx.dll
2009-01-14 05:36 . 2009-01-14 05:36 151,552 --a------ c:\windows\system32\Oemdspif.dll
2009-01-14 05:36 . 2009-01-14 05:36 26,112 --a------ c:\windows\system32\Ati2mdxx.exe
2009-01-14 05:35 . 2009-01-14 05:35 155,648 --a------ c:\windows\system32\ati2evxx.dll
2009-01-14 05:35 . 2009-01-14 05:35 43,520 --a------ c:\windows\system32\ati2edxx.dll
2009-01-14 05:34 . 2009-01-14 05:34 598,016 --a------ c:\windows\system32\ati2evxx.exe
2009-01-14 05:32 . 2009-01-14 05:32 53,248 --a------ c:\windows\system32\ATIDDC.DLL
2009-01-14 05:22 . 2009-01-14 05:22 4,009,152 --a--c--- c:\windows\system32\dllcache\ati3duag.dll
2009-01-14 05:22 . 2009-01-14 05:22 4,009,152 --a------ c:\windows\system32\ati3duag.dll
2009-01-14 05:05 . 2009-01-14 05:05 3,107,788 --a------ c:\windows\system32\ativvaxx.dat
2009-01-14 05:05 . 2009-01-14 05:05 3,107,788 --a------ c:\windows\system32\ativva5x.dat
2009-01-14 05:05 . 2009-01-14 05:05 2,500,224 --a--c--- c:\windows\system32\dllcache\ativvaxx.dll
2009-01-14 05:05 . 2009-01-14 05:05 2,500,224 --a------ c:\windows\system32\ativvaxx.dll
2009-01-14 05:05 . 2009-01-14 05:05 887,724 --a------ c:\windows\system32\ativva6x.dat
2009-01-14 05:05 . 2009-02-01 13:59 79,008 --a------ c:\windows\system32\ativvaxx.cap
2009-01-14 04:50 . 2009-01-14 04:50 48,640 --a------ c:\windows\system32\amdpcom32.dll
2009-01-14 04:45 . 2009-01-14 04:45 401,408 --a------ c:\windows\system32\atikvmag.dll
2009-01-14 04:44 . 2009-01-14 04:44 110,592 --a------ c:\windows\system32\atiadlxx.dll
2009-01-14 04:44 . 2009-01-14 04:44 17,408 --a------ c:\windows\system32\atitvo32.dll
2009-01-14 04:43 . 2009-01-14 04:43 53,248 --a------ c:\windows\system32\drivers\ati2erec.dll
2009-01-14 04:37 . 2009-01-14 04:37 577,536 --a--c--- c:\windows\system32\dllcache\ati2cqag.dll
2009-01-14 04:37 . 2009-01-14 04:37 577,536 --a------ c:\windows\system32\ati2cqag.dll
2009-01-14 04:37 . 2009-01-14 04:37 307,200 --a------ c:\windows\system32\atiiiexx.dll
2009-01-14 03:36 . 2009-01-14 03:36 45,056 --a------ c:\windows\system32\amdcalrt.dll
2009-01-14 03:36 . 2009-01-14 03:36 45,056 --a------ c:\windows\system32\amdcalcl.dll
2009-01-14 03:34 . 2009-01-14 03:34 3,227,648 --a------ c:\windows\system32\Amdcaldd.dll
2009-01-11 11:58 . 2009-01-23 14:17 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\Codemasters
2009-01-11 11:58 . 2009-01-25 00:42 107,888 --a------ c:\windows\system32\CmdLineExt.dll
2009-01-09 21:40 . 2009-01-28 21:22 <DIR> d-------- c:\documents and settings\kepa416\Dane aplikacji\teamspeak2
2009-01-09 21:40 . 2009-01-09 21:40 34,064 --a------ c:\windows\system32\lhacm.acm
2009-01-09 12:41 . 2009-01-09 12:42 <DIR> d-------- c:\windows\system32\NtmsData
2009-01-05 21:48 . 2009-01-24 16:23 <DIR> d-------- c:\program files\Debugging Tools for Windows (x86)
2009-01-05 16:12 . 2009-01-05 16:12 <DIR> d--hs---- c:\windows\ftpcache
2009-01-05 16:11 . 2009-01-07 20:32 22,328 --a------ c:\documents and settings\kepa416\Dane aplikacji\PnkBstrK.sys
2009-01-05 16:10 . 2009-01-16 17:30 <DIR> d-------- c:\windows\system32\LogFiles
2009-01-05 16:10 . 2009-01-07 20:31 309 --a------ c:\windows\game.ini
2009-01-05 02:05 . 2009-01-05 02:05 <DIR> d-------- c:\documents and settings\NetworkService\Dane aplikacji\HP
2009-01-05 02:04 . 2009-01-05 02:04 <DIR> d-------- c:\program files\Common Files\Hewlett-Packard
2009-01-05 02:04 . 1998-10-29 16:45 306,688 --a------ c:\windows\IsUninst.exe
2009-01-05 02:04 . 2006-03-03 21:03 282,680 --a------ c:\windows\system32\HPZidr12.dll
2009-01-05 02:04 . 2006-03-03 21:02 204,800 --a------ c:\windows\system32\HPZipr12.dll
2009-01-05 02:04 . 2006-03-03 21:02 94,208 --a------ c:\windows\system32\HPZipt12.dll
2009-01-05 02:04 . 2006-03-03 21:03 69,632 --a------ c:\windows\system32\HPZipm12.exe
2009-01-05 02:04 . 2006-03-03 21:03 65,536 --a------ c:\windows\system32\HPZinw12.exe
2009-01-05 02:04 . 2006-03-03 21:02 57,344 --a------ c:\windows\system32\HPZisn12.dll
2009-01-05 02:03 . 2009-01-05 02:03 <DIR> d-------- c:\program files\HP
2009-01-05 02:00 . 2006-04-12 11:04 282,624 -ra------ c:\windows\system32\HPZc3212.dll
2009-01-05 02:00 . 2006-01-03 18:12 77,824 -ra------ c:\windows\system32\HPZIDS01.dll
2009-01-05 02:00 . 2006-04-12 11:04 49,664 -ra------ c:\windows\system32\drivers\HPZid412.sys
2009-01-05 02:00 . 2006-04-10 14:03 48,128 --a------ c:\windows\system32\hpzll054.dll
2009-01-05 02:00 . 2008-04-14 00:17 25,856 --a------ c:\windows\system32\drivers\usbprint.sys
2009-01-05 02:00 . 2008-04-14 00:17 25,856 --a--c--- c:\windows\system32\dllcache\usbprint.sys
.
(((((((((((((((((((((((((((((((((((((((( Sekcja Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-02-01 12:32 --------- d-----w c:\program files\Mozilla Thunderbird
2009-02-01 11:45 --------- d--h--w c:\program files\InstallShield Installation Information
2009-02-01 11:45 --------- d-----w c:\program files\Common Files\InstallShield
2009-02-01 11:45 --------- d-----w c:\documents and settings\kepa416\Dane aplikacji\InstallShield
2009-02-01 10:50 --------- d-----w c:\documents and settings\kepa416\Dane aplikacji\Comodo
2009-01-31 16:48 --------- d-----w c:\documents and settings\kepa416\Dane aplikacji\ATI
2009-01-31 16:46 --------- d-----w c:\program files\ATI Technologies
2009-01-31 13:51 --------- d-----w c:\documents and settings\kepa416\Dane aplikacji\Xfire
2009-01-31 10:04 --------- d-----w c:\documents and settings\kepa416\Dane aplikacji\uTorrent
2009-01-27 21:25 --------- d-----w c:\program files\MSBuild
2009-01-27 12:20 --------- d-----w c:\documents and settings\kepa416\Dane aplikacji\Winamp
2009-01-19 10:44 --------- d-----w c:\program files\Common Files\Wise Installation Wizard
2009-01-08 22:55 --------- d-----w c:\documents and settings\kepa416\Dane aplikacji\gtk-2.0
2008-12-30 19:03 --------- d-----w c:\program files\Common Files\Adobe
2008-12-30 03:27 --------- d-----w c:\program files\Reference Assemblies
2008-12-29 23:51 361,344 ----a-w c:\windows\system32\drivers\tcpip.sys
2008-12-29 22:59 315,392 ----a-w c:\windows\HideWin.exe
2008-12-29 22:59 --------- d-----w c:\program files\Realtek
2008-12-29 20:47 --------- d-----w c:\program files\MSXML 4.0
2008-12-29 20:32 --------- d-----w c:\documents and settings\kepa416\Dane aplikacji\GetRightToGo
2008-12-29 19:49 --------- d-----w c:\documents and settings\kepa416\Dane aplikacji\GRETECH
2008-12-29 16:57 --------- d-----w c:\documents and settings\All Users\Dane aplikacji\LightScribe
2008-12-29 16:34 --------- d-----w c:\program files\Common Files\LightScribe
2008-12-29 16:33 --------- d-----w c:\program files\Common Files\Ahead
2008-12-29 16:33 --------- d-----w c:\documents and settings\kepa416\Dane aplikacji\Ahead
2008-12-29 16:33 --------- d-----w c:\documents and settings\All Users\Dane aplikacji\Ahead
2008-12-29 16:31 --------- d-----w c:\program files\Nero
2008-12-29 16:31 --------- d-----w c:\documents and settings\All Users\Dane aplikacji\Nero
2008-12-29 16:14 --------- d-----w c:\documents and settings\kepa416\Dane aplikacji\Ventrilo
2008-12-29 16:03 --------- d-----w c:\program files\Intel
2008-12-29 15:37 --------- d-----w c:\program files\Java
2008-12-29 15:31 --------- d-----w c:\program files\Razer
2008-12-29 15:31 --------- d-----w c:\program files\DIFX
2008-12-29 15:30 --------- d-----w c:\documents and settings\NetworkService\Dane aplikacji\Xfire
2008-12-29 15:26 --------- d-----w c:\documents and settings\kepa416\Dane aplikacji\Thunderbird
2008-12-29 15:25 --------- d-----w c:\program files\Alwil Software
2008-12-29 15:16 --------- d-----w c:\program files\microsoft frontpage
2008-12-29 15:15 --------- d-----w c:\program files\Usługi online
2008-12-29 15:13 --------- d-----w c:\program files\Windows Media Connect 2
.
------- Sigcheck -------
2008-12-30 00:51 361344 b0870dc4ae8a0a40c45ec66bcde3e523 c:\windows\system32\drivers\tcpip.sys
.
((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AQQ"="d:\progra~1\WapSter\WAPSTE~1\AQQ.exe" [2009-01-12 1680896]
"AutoConnect"="d:\program files\AutoConnect\AutoConnect.exe" [2004-08-28 295424]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2008-11-26 81000]
"DeathAdder"="c:\program files\Razer\DeathAdder\razerhid.exe" [2008-09-05 159744]
"COMODO Firewall Pro"="c:\program files\COMODO\Firewall\cfp.exe" [2009-02-01 1797880]
"COMODO Internet Security"="c:\program files\COMODO\Firewall\cfp.exe" [2009-02-01 1797880]
"AdslTaskBar"="stmctrl.dll" [2006-09-25 c:\windows\system32\stmctrl.dll]
c:\documents and settings\kepa416\Menu Start\Programy\Autostart\
Xfire.lnk - d:\program files\Xfire\Xfire.exe [2009-01-15 2993488]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.XFR1"= xfcodec.dll
"msacm.divxa32"= msaud32_divx.acm
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\[u]0[/u]OODBS
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"d:\\Program Files\\WapSter\\WapSter AQQ\\AQQ.exe"=
"d:\\Program Files\\Xfire\\Xfire.exe"=
"d:\\Program Files\\uTorrent\\uTorrent.exe"=
"e:\gry\Combat Arms EU\CombatArms.exe"= e:\gry\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe
"e:\gry\Combat Arms EU\Engine.exe"= e:\gry\Combat Arms EU\Engine.exe:*Enabled:Engine.exe
R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2008-12-29 111184]
R1 cmdGuard;COMODO Firewall Pro Sandbox Driver;c:\windows\system32\drivers\cmdguard.sys [2009-02-01 101776]
R1 cmdHlp;COMODO Firewall Pro Helper Driver;c:\windows\system32\drivers\cmdhlp.sys [2009-02-01 31504]
R3 AtiHdmiService;ATI Function Driver for HDMI Service;c:\windows\system32\drivers\AtiHdmi.sys [2008-12-29 93696]
R3 DAdderFltr;DeathAdder Mouse;c:\windows\system32\drivers\dadder.sys [2008-12-29 22784]
R3 Stmatm;ATM/ADSL miniport;c:\windows\system32\drivers\stmatm.sys [2009-01-16 57600]
R3 TaurusUsb;ADSL Modem USB Service;c:\windows\system32\drivers\torususb.sys [2009-01-16 685693]
R4 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2008-12-29 20560]
S3 AtcL001;NDIS Miniport Driver for Atheros L1 Gigabit Ethernet Controller;c:\windows\system32\drivers\l151x86.sys [2008-12-29 39424]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
"c:\program files\Common Files\LightScribe\LSRunOnce.exe"
.
.
------- Skan uzupełniający -------
.
TCP: {25C4F181-B943-45D3-9F21-9B52A91F1DD7} = 208.67.222.222 208.67.220.220
FF - ProfilePath - c:\documents and settings\kepa416\Dane aplikacji\Mozilla\Firefox\Profiles\qakhulk9.default\
FF - prefs.js: browser.startup.homepage -
FF - plugin: c:\documents and settings\All Users\Dane aplikacji\NexonEU\NGM\npNxGameeu.dll
.
**************************************************************************
catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-01 14:00:15
Windows 5.1.2600 Dodatek Service Pack 3 NTFS
skanowanie ukrytych procesów ...
skanowanie ukrytych wpisów autostartu ...
skanowanie ukrytych plików ...
skanowanie pomyślnie ukończone
ukryte pliki: 0
**************************************************************************
.
--------------------- ZABLOKOWANE KLUCZE REJESTRU ---------------------
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG11.00.00.01WORKSTATION"="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"
.
--------------------- Pliki DLL ładowane pod uruchomionymi procesami ---------------------
- - - - - - - > 'winlogon.exe'(592)
c:\windows\system32\Ati2evxx.dll
.
------------------------ Pozostałe uruchomione procesy ------------------------
.
c:\windows\system32\ati2evxx.exe
c:\program files\Alwil Software\Avast4\aswUpdSv.exe
c:\program files\Alwil Software\Avast4\ashServ.exe
c:\windows\system32\ati2evxx.exe
c:\program files\COMODO\Firewall\cmdagent.exe
c:\windows\system32\oodag.exe
c:\windows\system32\HPZipm12.exe
c:\program files\Razer\DeathAdder\razerofa.exe
c:\windows\system32\rundll32.exe
c:\windows\system32\msiexec.exe
d:\program files\Ventrilo\Ventrilo.exe
.
**************************************************************************
.
Czas ukończenia: 2009-02-01 14:01:17 - komputer został uruchomiony ponownie [kepa416]
ComboFix-quarantined-files.txt 2009-02-01 13:01:15
Przed: 13,928,419,328 bajtów wolnych
Po: 14,024,241,152 bajtów wolnych
275 --- E O F --- 2008-12-29 22:15:43
Ostatnio edytowany przez
kepa416 02 Lut 2009, 17:04, edytowano w sumie 2 razy
Już poprawione
